FinCEN MSB Registration and State Licenses for Crypto Sellers
FinCEN MSB registration for crypto sellers is only step one. See which state licenses, AML controls and proof processors want before they board you.
Photo: Pixabay
On this page 6 sections
Key takeaways
- Underwriters treat FinCEN registration as a filing, not a license, and look past it to your state licensing.
- Build a state-by-state licensing matrix with counsel, then make your onboarding and kiosk map match it exactly.
- Underwriters test your website and machine locations against that matrix. One gap can sink the application.
- Treat a pending application as no license. Any interim arrangement should put a licensed company in real control of funds and keys.
If your business sells cryptocurrency to customers, buys it from them or moves it for them, expect two licensing questions before any bank or acquirer takes you seriously. First, do you need FinCEN MSB registration for your crypto activity? Second, which states require a money transmitter license? The federal filing is usually the quicker of the two. State licensing takes the time, capital and scrutiny, and underwriters check it most closely.
Whether either applies depends on how coins and customer money move through your business, on each state's law, and on rules that change. Everything here is general information, not legal advice. Have a lawyer who handles money transmission confirm your status. Then check the current requirements from FinCEN and each state regulator before you launch or apply for a merchant account.
Do You Need a Money Transmitter License for Crypto?
FinCEN, the U.S. Treasury's Financial Crimes Enforcement Network, has published guidance on how it views businesses that deal in virtual currency. Read the current version with your counsel instead of relying on a summary, including this one. In practice, the analysis turns on what you do with the coins and whose money they are. What you call your business doesn't decide it.
The table below won't give you a verdict. It lists the questions a money transmission lawyer will press on for common crypto business models and the records worth bringing to that meeting.
| Business model | The question that usually decides it | What to bring counsel |
|---|---|---|
| You accept bitcoin as payment for your own goods | Do you ever hold or send coins for someone else, or only for your own account? | Wallet and exchange records showing the funds stay yours |
| You accept crypto through a third-party processor that settles you in dollars | Who holds the coins and the customer's money during the transaction? | The processor agreement and the processor's own licensing details |
| You sell coins from your inventory online or at a counter | Is buying and selling crypto for customers the service you provide? | Your product flow, pricing model and the states your customers come from |
| You operate crypto kiosks | Where does each machine sit, and who controls the cash, funds and keys? | Location list, host agreements and cash-handling procedures |
| You hold customers' crypto in wallets you manage | Do you control the keys to customers' coins? | Custody setup and wallet provider contracts |
Many owners blur one distinction. A coffee shop that takes crypto at checkout is in a very different position from a business whose product is the crypto. Once coins are what the customer buys, regulators and card networks look much harder at you. That includes how card networks classify and price crypto purchases, which affects what your customers pay.
States write their own money transmission laws, and some have rules aimed specifically at virtual currency. Your federal status and your state status are separate questions. You need a documented answer to both.
FinCEN MSB Registration for Crypto, Step by Step
The federal side is mostly paperwork, but the order you do it in matters.
- Map every money movement. List each way money or crypto passes through the business: purchases, sales, transfers to outside wallets and custody. This map drives your registration, your AML program and your state analysis.
- Get counsel's written view on MSB status. You will reuse the memo with banks, processors and state regulators.
- Adopt your AML program before you go live. FinCEN's rules set out what the program must contain. Banks and processors will ask for the program itself, so have it written, approved and staffed before your first transaction.
- File through FinCEN's online system using its current instructions, including the deadline measured from when you start operating. Read those instructions directly. Older blog posts may describe outdated rules.
- Keep the acknowledgment and your backup records. Every bank and processor will ask for the acknowledgment.
- Calendar the upkeep. Registration has renewal and update obligations, and changes in ownership or activities can trigger new filings. If other businesses act as your agents, check what records FinCEN expects you to keep on them.
Underwriters read FinCEN registration as a filing. Your listing in FinCEN's public registrant search shows that you filed. It doesn't show that any regulator examined your business or approved you to transmit money in any state. Sellers who send that printout to an underwriter as "proof of licensing" lose credibility on page one of their file.
State Money Transmitter Licenses for Bitcoin Sellers
Most of the cost, time and judgment sits at the state level. Requirements differ from state to state, and several have revised their rules in recent years. The list below is a general picture of what applications commonly cover, not any one state's checklist:
- Financial assurance, often a surety bond. Sureties usually review your financials, and sometimes ask for collateral, before they will write one.
- Proof of financial strength, which regulators may expect you to keep up for as long as you hold the license.
- Rules on safeguarding customer funds, which can extend to crypto you hold for customers.
- Background checks on owners, officers and key staff, often with fingerprints and personal financial disclosures.
- Supporting documents such as financial statements, a business plan, and your AML and cybersecurity policies.
- Ongoing obligations, including exams, periodic reports and advance notice of ownership changes.
Many states take applications through a shared online licensing platform, but each state still reviews against its own law. One package rarely works everywhere unchanged. Reviews commonly take many months, and incomplete applications take longer.
Don't assume your home state is the only one that matters. State laws can reach businesses that serve their residents from elsewhere. Counsel will usually start the analysis from where your customers and machines are, not where your company is incorporated.
Illustrative Example: Planning a Licensed Launch
All facts here are hypothetical. An online seller holds a license in its home state and has applications pending in five others. Its waitlist shows signups from 14 states.
A compliant launch is narrow. The seller opens accounts only for customers in its licensed state and in any state where counsel has documented an exemption in writing. It blocks onboarding from everywhere else using verified address, ID and location checks, and it adds each state only when that state's license issues. Geographic blocking is a routine compliance control, and it hands the processor a clean file: the states the seller serves match the states where it is licensed.
A kiosk operator faces the same logic with fewer variables, because the machines' locations define where licensing questions arise. Starting in a single state concentrates bonding and capital in one place. Before signing location agreements, ask counsel whether that state has rules aimed at kiosks specifically, such as transaction limits, fee disclosures or on-screen fraud warnings.
Crypto AML Program Requirements Underwriters Look For
Federal and state rules set the legal content of an AML program, and counsel should confirm yours meets them. Sponsor banks and underwriters typically look for the same building blocks: written policies tied to a documented risk assessment, a named compliance officer with real authority, regular staff training and periodic independent testing of the program.
Day-to-day controls are where crypto businesses get tested:
- Customer identification. Verify identity at onboarding and again when a customer's activity changes. Store the records so you can produce them quickly for an examiner.
- Suspicious activity monitoring and reporting. Know when and how you would report to FinCEN, and train staff on what they may say to a customer afterward. Crypto red flags include amounts kept just under your limits, coins arriving from mixing services, funds that come in and go out within minutes, and kiosk customers who seem to be following instructions from someone on the phone. That last one often signals a scam victim.
- Cash procedures. Cash-accepting kiosks and counters bring their own federal reporting obligations. Build those procedures with counsel before the first machine goes live.
- Sanctions screening. Screen customers against U.S. sanctions lists. Many compliance teams also screen wallet addresses and use blockchain analytics tools to trace where incoming funds came from.
Banks read the same headlines you do, including recent reports on how much money is laundered through the U.S. A program that exists only on paper won't survive a sponsor bank's questions.
How Processors Verify Your Licensing
An acquirer boarding a crypto seller puts its sponsor bank's name next to yours, so expect the review to go well past a checklist. Underwriters commonly:
- Look up your FinCEN registration and confirm the legal name, activities and states match your application.
- Check each claimed state license against the regulator's public records for status and expiration.
- Ask for a licensing matrix with one row per state showing a license number, "pending" or "exempt," plus counsel's memo for every exemption.
- Request your AML policy, your latest independent review and evidence that its findings were fixed.
- Ask who your compliance officer is and which identity, sanctions and blockchain analytics vendors you use.
- Test your website. If someone in an unlicensed state can sign up, that mismatch can end the review.
Card-funded crypto purchases are hard to unwind once coins leave your wallet. Underwriters will also ask about fraud controls such as 3D Secure authentication for online card purchases and how you handle crypto purchase chargebacks after coins are sent. For the full underwriting file, see what underwriters need to see for crypto exchange merchant accounts.
The diligence should run both ways. Before you sign, ask any processor whether its sponsor bank permits your activity, what happens to your account if that bank's policy changes, and how much notice you would get.
Operating While State Licenses Are Pending
Treat a pending application as no license. Before serving any state where your license hasn't issued, ask counsel to explain your federal and state exposure, including personal exposure for owners.
While you wait, the options counsel will usually discuss are:
- Serve only states where you're licensed or have a documented exemption, and keep onboarding closed everywhere else.
- Work as an agent or authorized delegate of a licensed transmitter, if the state's law allows it, under a written agreement that puts the licensed company in charge of the transmission.
- Use a licensed provider's platform that holds customer funds and keys and owns the customer relationship for the regulated activity.
Expect regulators and banks to look at who actually controls the money and the keys, not at what the contract calls each party. If your company holds the keys, calling a partner "the transmitter" in a contract won't change who is doing the transmitting.
Some moves are off the table. Don't sell in pending states, and don't describe the company as licensed before it is. Never run crypto sales through another merchant's account or under a different business description. That practice is transaction laundering. It gets accounts terminated and can leave a record in the industry databases processors check, a record that follows the business and its owners to later applications.
Your next step is the licensing matrix. Build it with counsel, get written sign-off on every exemption, and compare it line by line with the states your site accepts and your kiosks sit in. MannyPay offers high-risk merchant accounts, and whether any particular business model is eligible is an underwriting decision. To ask about your situation, request a free quote. A MannyPay specialist responds within one business day.
This article is for general educational purposes and is not legal, tax or financial advice. Card network rules and state laws change; confirm current requirements for your business.
